Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File: F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier: RLGGvwftM/f7+dcdW4hH5nFjck/DzudDuNR87AMNvLs=
Subject key identifier: 79:BA:F9:1B:D4:16:85:A6:F0:55:8D:60:18:D6:68:0C:5A:1B:4D:39
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer: /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial: 019D28F251BA2C3FABA9C0E561DB7B93B0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number: 0ABC
Signing time: Thu 26 Mar 2026 07:01:02 +0000
Manifest this update: Thu 26 Mar 2026 07:01:02 +0000
Manifest next update: Fri 27 Mar 2026 07:01:02 +0000
Files and hashes: 1: F3XdxSn1elmets19uiuSstN190o.crl (hash: 9rLsUT2ya1VUDoK4QAsLbRpx+ury1MeD4faSvuCZ3W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:51:ba:2c:3f:ab:a9:c0:e5:61:db:7b:93:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Validity
Not Before: Mar 26 07:01:02 2026 GMT
Not After : Mar 27 07:01:02 2026 GMT
Subject: CN=79baf91bd41685a6f0558d6018d6680c5a1b4d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:73:9e:f9:30:2f:b3:c2:70:3b:0e:b7:bb:
1a:21:82:95:1a:37:1e:4f:98:a8:ae:c5:0c:58:03:
bb:91:6d:50:78:94:e2:5b:ee:54:7f:3a:18:14:ee:
7d:82:fa:06:6d:b2:7c:a2:e8:23:73:24:06:36:9d:
fe:3c:51:9f:49:90:07:09:5a:14:30:35:9e:5a:c3:
a9:4d:96:fc:2a:ca:aa:e6:5c:3b:92:3d:e7:f9:01:
fc:c6:6d:8b:0c:2d:36:4c:14:db:2d:cf:a2:72:26:
dd:22:67:ad:d3:ad:49:55:12:4a:ba:0a:72:09:54:
b0:eb:f5:38:74:20:b6:77:f4:30:4b:66:a8:76:24:
b8:ca:b2:cd:87:68:b5:ab:b0:52:6a:33:f4:8f:4a:
a3:c5:69:f1:c6:19:96:85:01:cb:7b:01:a2:40:20:
e8:91:e4:cd:13:76:53:f8:c1:95:cc:07:07:04:32:
95:94:3b:50:c6:7e:94:03:7e:39:f8:30:e1:ae:c2:
53:3a:00:65:b0:db:98:76:9c:ed:5e:76:42:8d:ee:
7b:4e:f0:48:d7:70:d7:58:06:72:e0:1b:6e:b0:3e:
81:99:8e:fa:5b:25:cd:a6:ea:f0:75:fc:b4:c2:11:
9d:f8:d2:33:53:42:76:ac:d0:65:e7:87:5d:6a:0b:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BA:F9:1B:D4:16:85:A6:F0:55:8D:60:18:D6:68:0C:5A:1B:4D:39
X509v3 Authority Key Identifier:
keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f2:80:5c:f5:0b:c9:e9:fd:1f:8f:b0:c9:39:2f:6e:2f:07:
fe:d1:0d:c0:28:83:8f:a4:10:14:6f:df:2b:5d:81:f7:c9:61:
c6:36:b3:19:45:b1:11:96:b9:f9:7a:6c:97:29:c4:e9:de:c8:
6d:cd:77:f3:de:d8:38:bd:af:a9:ba:7e:82:54:ee:72:88:7b:
90:64:2d:b5:a0:24:e9:fa:d1:8a:88:51:9f:70:c1:d3:79:5c:
f6:8f:21:09:d6:a9:20:f8:32:01:0b:c6:50:a3:e2:99:d4:18:
72:86:5b:b0:f8:f8:e0:f3:8d:e5:35:48:a8:d2:f3:5c:fc:67:
ee:3f:29:62:12:e6:45:d2:5e:e5:0e:15:20:03:3c:4d:d2:6c:
2e:86:0c:5e:33:a6:ec:be:86:ea:ad:44:5f:e0:21:a9:f6:bb:
c7:ba:7d:fe:47:30:b3:1d:d1:93:57:f0:a7:b1:e7:ea:57:8c:
97:17:de:b5:ce:ae:79:cf:c9:fb:18:c3:be:11:62:94:c0:f5:
19:05:01:fc:2f:e9:34:c8:56:7a:28:c1:c7:d4:65:cc:d0:b1:
dc:47:ef:ee:7d:02:df:ba:ff:1c:22:8a:1e:e8:b3:62:68:2e:
dd:45:52:ed:a7:90:2e:27:bd:b6:f5:d4:17:d7:b3:62:bf:80:
dc:72:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:02 2026 by rpki-client